From owner-freebsd-security Sat Jun 22 10:23:19 2002 Delivered-To: freebsd-security@freebsd.org Received: from orthanc.ab.ca (orthanc.ab.ca [216.123.203.186]) by hub.freebsd.org (Postfix) with ESMTP id C435537B401 for ; Sat, 22 Jun 2002 10:23:14 -0700 (PDT) Received: from orthanc.ab.ca (localhost.orthanc.ab.ca [127.0.0.1]) by orthanc.ab.ca (8.12.3/8.12.3) with ESMTP id g5MHNEJZ082194; Sat, 22 Jun 2002 11:23:14 -0600 (MDT) (envelope-from lyndon@orthanc.ab.ca) Message-Id: <200206221723.g5MHNEJZ082194@orthanc.ab.ca> From: Lyndon Nerenberg Organization: The Frobozz Magic Homing Pigeon Company To: twig les Cc: security@FreeBSD.ORG Subject: Re: Possible security liability: Filling disks with junk or spam In-reply-to: Your message of "Fri, 21 Jun 2002 21:55:59 PDT." <20020622045559.41921.qmail@web10106.mail.yahoo.com> X-Mailer: mh-e 5.0.92; MH 6.8.4; Emacs 21.2 Date: Sat, 22 Jun 2002 11:23:14 -0600 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org >>>>> "twig" == twig les writes: twig> When I asked if it would break something to forward those twig> accounts' mail to /dev/null instead of root, I meant: do those twig> psuedo-users actually send anything via mail or everything via twig> syslog? In the case of UUCP and news, if you are running either of those subsystems the system will send legitimate mail to those logins, so you should be reading them. OTOH, if you don't run UUCP or news, you can reject mail to those accounts. Note that most Usenet software packages have a configurable target for emailed status reports, so you can have them mail directly to another address (say, root) if you like. Also, messages about the news subsystem are traditionally sent to usenet@, and not news@. On UNIX systems, the usenet address almost always exists only as an entry in the mail alias file. If you run news, both usenet@ and news@ should be redirected to a mailbox that is read regularly. --lyndon To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message